{"id":"EUVD-2024-55681","enisaUuid":"685dbb1c-19db-3c81-8475-4a6a3973fd85","description":"SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a panic that crashes the server.","datePublished":"Jul 18, 2026, 1:10:06 PM","dateUpdated":"Jul 28, 2026, 1:47:51 AM","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6wr5-jmpr-mjcx\nhttps://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-nonexistent-function\n","aliases":"CVE-2024-58365\nGHSA-9qjc-q7hw-vw5r\n","assigner":"VulnCheck","epss":0.45,"enisaIdProduct":[{"id":"0da295f3-9d27-33a9-9235-705916b1d0b0","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c1.2.0"}],"enisaIdVendor":[{"id":"0892dd16-a656-3fc5-8b09-1ad44eff9e53","vendor":{"name":"surrealdb"}}],"enisaIdVulnerability":[{"id":"3e2635de-5ce8-3411-a691-ed017d685f18","vulnerability":{"id":"CVE-2024-58365","description":"SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a panic that crashes the server.","datePublished":"Jul 18, 2026, 1:10:06 PM","dateUpdated":"Jul 28, 2026, 1:47:51 AM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6wr5-jmpr-mjcx\nhttps://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-nonexistent-function\n","enisa_id":"EUVD-2024-55681\n","assigner":"VulnCheck","epss":0.45,"dataProcessed":"Oct 29, 2026, 7:19:05 AM","vulnerabilityProduct":[{"id":"d8d2d1c5-4702-3320-8a3b-211e332c76c0","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c1.2.0"}],"vulnerabilityVendor":[{"id":"5e5db5ff-1946-3a9d-bffa-78572fa35d5b","vendor":{"name":"surrealdb"}}]}},{"id":"966620a8-b170-37ad-8815-fedcb83c8913","vulnerability":{"id":"GHSA-9qjc-q7hw-vw5r","description":"Duplicate Advisory: Uncaught Exception in Macro Expecting Native Function to Exist","datePublished":"Jul 18, 2026, 3:31:48 PM","dateUpdated":"Sep 3, 2026, 8:08:16 PM","baseScore":0.0,"references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6wr5-jmpr-mjcx\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-58365\nhttps://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-nonexistent-function\n","enisa_id":"EUVD-2024-55681\n","aliases":"GHSA-9qjc-q7hw-vw5r\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}